CVE-2022-41562 — Cross-site Scripting in Software INC Tibco Jasperreports Server

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
8.4HIGHNVD
EPSS
0.9%
top 24.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Tibco Software INC Tibco Jasperreports ServerTibco Software INC Tibco Jasperreports Server Community EditionTibco Software INC Tibco Jasperreports Server Developer Edition+3 more
Timeline
PublishedDec 13
Latest updateDec 15

Description

The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and TIBCO JasperReports Server for Microsoft Azure contains an easily exploitable vulnerability that allows a privileged/administrative attacker with n…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:HExploitability: 1.7 | Impact: 6.0

Affected Packages6 packages

▶CVEListV5tibco_software_inc/tibco_jasperreports_serverunspecified — 8.0.2+1

🔴Vulnerability Details

3
CVEList
TIBCO JasperReports Server XSS Issue on Roles↗2022-12-15
▶
OSV
CVE-2022-41562: The HTML escaping component of TIBCO Software Inc↗2022-12-13
▶
GHSA
GHSA-x673-9hgv-mcv7: The HTML escaping component of TIBCO Software Inc↗2022-12-13
▶
CVE-2022-41562 — Cross-site Scripting | cvebase